Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/38fa7f22-5f19-326e-97e1-4e532983fea5.roa
File:                     38fa7f22-5f19-326e-97e1-4e532983fea5.roa (raw, json)
Hash identifier:          jTBiDau+2unDqj5Maj/Abo9IHK+hsnF1snCyjgq3wHc=
Subject key identifier:   9A:8A:28:22:75:E0:8A:61:B5:08:FD:48:EC:FE:AA:27:80:56:01:77
Certificate issuer:       /CN=7478c754-137f-4ef1-a8b5-aa954253fb79
Certificate serial:       010D0C9F43285848159FF86107D4A1F8CA629400
Authority key identifier: E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/38fa7f22-5f19-326e-97e1-4e532983fea5.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     18474
IP address blocks:        66.78.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f8:61:07:d4:a1:f8:ca:62:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7478c754-137f-4ef1-a8b5-aa954253fb79
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=2f4f70c2-8628-469b-9e1d-14995fe5bc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:05:bf:8c:15:ed:c3:46:cb:6c:75:65:e7:
                    ff:e1:41:68:af:60:b0:45:89:76:b9:eb:27:5d:44:
                    19:ad:36:39:d9:eb:c3:94:6c:ab:db:9c:c2:f4:7c:
                    a7:bd:81:ee:59:eb:6b:f1:f7:c1:79:00:65:c8:2c:
                    db:df:d1:92:8e:ab:d3:a8:f8:3c:6e:1a:a5:e2:28:
                    38:c2:dd:5b:69:20:f4:2b:27:ee:0a:52:41:2c:a3:
                    ee:42:6a:39:23:5d:b4:32:9a:8c:00:de:74:e7:16:
                    c9:f4:20:9f:20:61:ba:bd:b7:c5:a9:12:d8:fc:4a:
                    56:bb:7c:ea:e0:40:24:7b:93:85:2f:d0:17:4b:ae:
                    d2:e4:68:b9:4c:0b:ab:48:d3:97:a1:f5:97:18:58:
                    77:23:d4:51:a4:f2:ab:63:f7:3a:c1:34:72:d9:4e:
                    87:74:69:09:5f:3b:bc:cd:a4:0e:90:c0:50:1a:88:
                    e8:f9:e3:d9:ad:7a:59:ce:03:ad:bd:cb:da:a1:9e:
                    1a:e1:cd:93:ef:50:23:0d:5b:87:10:51:4e:78:18:
                    9c:50:d7:2e:db:91:e8:1a:41:a5:a8:ee:57:c4:3f:
                    6d:7d:b8:4a:32:57:df:4c:96:95:13:dd:b1:3d:6e:
                    ce:a8:25:54:aa:eb:1f:c8:f4:33:08:82:c8:21:60:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8A:28:22:75:E0:8A:61:B5:08:FD:48:EC:FE:AA:27:80:56:01:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/38fa7f22-5f19-326e-97e1-4e532983fea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4d:85:03:bc:2b:65:5b:c5:c2:da:53:10:20:34:73:82:f8:
         b3:4d:f7:0e:7d:54:f3:8d:17:70:c8:05:8e:3a:e9:62:5c:48:
         56:30:40:40:f1:f3:c9:1e:cb:1d:9f:b9:76:01:69:e2:4e:52:
         3c:28:84:e4:29:a7:99:ab:1f:86:69:11:bf:57:7f:13:9d:6e:
         dc:de:c2:01:7d:97:ec:56:5c:b1:a6:19:b3:52:28:c9:ca:12:
         ef:52:ea:43:b8:df:cc:62:98:eb:c8:80:be:d1:ab:3f:e4:37:
         2a:49:c5:87:d8:8e:89:97:23:f6:86:47:e7:53:43:5a:63:c7:
         32:8a:ab:76:7f:04:54:76:5f:73:3c:f2:e4:12:90:47:88:4c:
         e7:5d:af:0c:d0:5e:8f:5f:26:5b:b5:35:c4:28:6c:7c:90:29:
         ac:6e:7f:f0:cf:36:bf:aa:12:c8:0f:4b:c8:fa:62:6d:fc:8b:
         f4:59:c7:8f:e1:bb:7c:6e:e4:1a:c7:48:e0:27:8c:25:84:18:
         57:8c:ec:bc:25:21:c4:91:bd:15:b0:15:21:50:fa:89:10:7c:
         a4:48:ff:00:7e:48:6f:71:88:80:a9:d6:19:b8:8b:c1:c8:2b:
         48:10:25:67:48:08:65:9a:23:d8:d3:67:80:40:2a:e6:ef:cc:
         78:e0:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:36 2025 by rpki-client